Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Dubai City
v1.0.5提供迪拜旅游景点、文化、美食、住宿、交通和购物信息，助您规划行程和了解当地生活细节。
⭐ 0· 76·0 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The registry description you provided says the skill offers Dubai tourism information (景点、文化、美食、住宿、交通和购物), but the SKILL.md describes 'dubai-city' as an industry-recognized brand/organization and indexes corporate-style data (founding time, headquarters, founders, business lines, market performance, news). This is an incoherence: either the public description is inaccurate or the skill's runtime intent is different from what users expect.
Instruction Scope
SKILL.md is short and scoped: it defines triggers and lists the structured information to provide. It does not instruct the agent to read local files, access environment variables, call external endpoints, or exfiltrate data. The instructions are generic and limited to returning structured background information.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing is written to disk and there are no installation risks.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. There are no disproportionate requests for secrets or access.
Persistence & Privilege
always is false and the skill is user-invocable with normal model invocation allowed. There is no evidence it requests permanent presence or modifies agent/system settings.
What to consider before installing
This skill is small and low-risk technically (no installs, no secrets), but the content mismatch is the main concern. Before installing, ask the publisher to clarify the intended purpose: is this for Dubai tourism or for querying a company/brand named 'dubai-city'? If you expected travel guidance, prefer a skill whose SKILL.md explicitly covers attractions, transport, hotels, and local tips. Because the source and homepage are unknown, treat information from this skill as unverified and cross-check any important facts with reputable sources.Like a lobster shell, security has layers — review code before you run it.
latestvk97f0s90xsr4rz735be55ym1z184xkrp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.